AT
Product
Application Testing Suite
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 19Low 0
Watch
Add Application Testing Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-3304 | 6.5 | Jan 16 | Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-11056 | 6.5 | Aug 31 | RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption… Affected: 13.3.0.1 |
| CVE-2018-1257 | 6.5 | May 11 | Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2019-2557 | 6.3 | Apr 23 | Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps) Affected: 13.3.0.1 |
| CVE-2018-3305 | 6.3 | Jan 16 | Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 13.3.0.1 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 13.3.0.1 |
| CVE-2019-17091 | 6.1 | Oct 2 | faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS… Affected: 13.2.0.1; 13.3.0.1 |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 12.5.0.3; 13.1.0.1; 13.2; 13.2.0.1; 13.3; 13.3.0.1 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 13.2.0.1; 13.3.0.1 |
| CVE-2018-11057 | 5.9 | Aug 31 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known… Affected: 13.3.0.1 |
| CVE-2018-11039 | 5.9 | Jun 25 | Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-1271 | 5.9 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-11055 | 5.5 | Aug 31 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection')… Affected: 13.3.0.1 |
| CVE-2020-5397 | 5.3 | Jan 17 | Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux… Affected: 13.3.0.1 |
| CVE-2017-3311 | 5.3 | Jan 27 | Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control (subcomponent: Test Manager for Web Apps) Affected: 12.4.0.2; 12.5.0.2; 12.5.0.3 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 13.3.0.1 |
| CVE-2016-0492 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0491 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0490 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0489 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0488 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0487 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0486 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0485 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0484 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0482 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0480 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0478 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2016-0477 | – | Jan 21 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect… Affected: 12.4.0.2; 12.5.0.2 |
| CVE-2015-7940 | – | Nov 9 | The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series… Affected: 12.5.0.1; 12.5.0.2; 12.5.0.3 |